access:pre-auth 类型相关 24786 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-5541 | WordPress plugin Ibtana - WordPress Website Builder 安全漏洞 — Ibtana – WordPress Website Builder CWE-862 | 5.3 | Medium | 2024-06-18 |
| CVE-2024-6048 | Openfind Information Technology MailAudit 操作系统命令注入漏洞 — MailGates 5.0 CWE-78 | 9.8 | Critical | 2024-06-17 |
| CVE-2024-6047 | GeoVision EOL 操作系统命令注入漏洞 — GV_DSP_LPR_V2 CWE-78 | 9.8 | Critical | 2024-06-17 |
| CVE-2024-6045 | D-Link E Series 安全漏洞 — G403 CWE-912 | 8.8 | High | 2024-06-17 |
| CVE-2024-6044 | D-Link Routers 路径遍历漏洞 — G403 CWE-22 | 6.5 | Medium | 2024-06-17 |
| CVE-2024-34833 | Payroll Management System 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-06-17 |
| CVE-2024-4258 | WordPress plugin Video Gallery 安全漏洞 — Video Gallery – YouTube Playlist, Channel Gallery by YotuWP CWE-98 | 9.8 | Critical | 2024-06-15 |
| CVE-2024-5868 | WordPress Plugin WooCommerce-Social Login 安全漏洞 — WooCommerce - Social Login CWE-330 | 6.5 | Medium | 2024-06-15 |
| CVE-2024-5871 | WordPress Plugin WooCommerce - Social Login 安全漏洞 — WooCommerce - Social Login CWE-502 | 9.8 | Critical | 2024-06-15 |
| CVE-2024-5671 | Trellix IPS Manager 代码问题漏洞 — Intrusion Prevention System (IPS) Manager CWE-502 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-2472 | WordPress Plugin LatePoint 安全漏洞 — LatePoint Plugin CWE-639 | 9.1 | Critical | 2024-06-14 |
| CVE-2024-3912 | ASUS Router 代码问题漏洞 — DSL-N17U CWE-434 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-5577 | WordPress plugin Where I Was, Where I Will Be 安全漏洞 — Where I Was, Where I Will Be CWE-98 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-31163 | ASUS Download Master 安全漏洞 — Download Master CWE-121 | 7.2 | High | 2024-06-14 |
| CVE-2024-31162 | ASUS Download Master 安全漏洞 — Download Master CWE-78 | 7.2 | High | 2024-06-14 |
| CVE-2024-3966 | WordPress plugin Pray For Me 安全漏洞 — Pray For Me | 6.1AI | Medium AI | 2024-06-14 |
| CVE-2024-5551 | WordPress plugin WP STAGING Pro WordPress Backup 安全漏洞 — WP STAGING Pro WordPress Backup Plugin CWE-352 | 7.5 | High | 2024-06-14 |
| CVE-2024-4936 | WordPress plugin Canto 安全漏洞 — Canto CWE-98 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-1094 | WordPress plugin Timetics 安全漏洞 — Timetics – Appointment Booking & Scheduling CWE-862 | 7.3 | High | 2024-06-14 |
| CVE-2024-27169 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP) CWE-306 | 8.4 | High | 2024-06-14 |
| CVE-2023-6492 | WordPress plugin Simple Sitemap 安全漏洞 — Simple Sitemap – Create a Responsive HTML Sitemap CWE-352 | 4.3 | Medium | 2024-06-14 |
| CVE-2024-0892 | WordPress plugin Schema App Structured Data 安全漏洞 — Schema App Structured Data CWE-352 | 4.3 | Medium | 2024-06-14 |
| CVE-2024-3080 | ASUS Router 授权问题漏洞 — ZenWiFi XT8 CWE-287 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27144 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP) CWE-22 | 9.8 | Critical | 2024-06-14 |
| CVE-2024-27141 | Toshiba e-STUDIO 安全漏洞 — Toshiba Tec e-Studio multi-function peripheral (MFP) CWE-776 | 5.9 | Medium | 2024-06-14 |
| CVE-2024-33374 | LB-LINK BL-W1210M 安全漏洞 — n/a | 8.8AI | High AI | 2024-06-14 |
| CVE-2024-5949 | Deep Sea Electronics DSE855 安全漏洞 — DSE855 CWE-835 | 6.5AI | Medium AI | 2024-06-13 |
| CVE-2024-37131 | Dell Secure Connect Gateway 安全漏洞 — Secure Connect Gateway (SCG) Policy Manager CWE-942 | 7.5 | High | 2024-06-13 |
| CVE-2024-30472 | Dell ThinOS 信息泄露漏洞 — Wyse 5070 Thin Client CWE-200 | 7.5 | High | 2024-06-13 |
| CVE-2024-4371 | WordPress plugin CoDesigner WooCommerce Builder for Elementor 安全漏洞 — CoDesigner – All in One Elementor WooCommerce Builder CWE-502 | 9.0 | Critical | 2024-06-13 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24786 条 CVE 漏洞。